This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: prJIF84RJ8uw9sBTdsLVGI2K8oFCFFYujbjBfk1YAf4= Subject key identifier: 01:8A:FF:CD:54:F6:91:F0:0C:00:9C:30:50:EB:AE:93:2B:5D:C5:E9 Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 348843F71930F303A63C80190D5B8AE37FB3B325 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 03B3 Signing time: Wed 24 Dec 2025 05:31:17 +0000 Manifest this update: Wed 24 Dec 2025 05:26:17 +0000 Manifest next update: Sat 27 Dec 2025 16:28:17 +0000 Files and hashes: 1: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=) 2: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: KLWx4tvdlUYdDByrUwhRS16KFp40/nWQXOkr6WlwuF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:88:43:f7:19:30:f3:03:a6:3c:80:19:0d:5b:8a:e3:7f:b3:b3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Dec 24 05:26:17 2025 GMT Not After : Dec 27 16:28:17 2025 GMT Subject: CN=018AFFCD54F691F00C009C3050EBAE932B5DC5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:4f:92:2d:1b:ed:ab:ab:62:08:17:b6:ea: e7:4b:a7:f4:56:35:de:1d:c1:a4:22:8f:4b:ce:70: ee:3e:18:69:94:72:7c:8e:6f:98:9b:cb:d6:1e:6d: 11:d0:0b:f4:d2:8a:46:1f:3e:24:89:07:46:d2:56: 32:60:45:e2:75:49:82:56:56:f7:0c:d1:ec:c8:d1: 04:0c:5b:97:0f:d8:50:b6:db:dd:07:e3:6d:4a:e7: e4:7b:40:17:57:9c:ca:c4:74:e5:8e:8f:83:89:ce: 76:94:69:86:dd:44:9f:21:76:4d:06:bf:c2:40:f3: d7:9b:b7:ba:78:c5:90:6e:e2:2c:80:ac:64:96:04: bc:a6:ed:73:23:2f:dd:1d:76:d7:06:98:8f:05:43: ef:45:0b:75:6e:d1:cf:61:e6:10:a9:df:b1:ed:be: 0d:b6:d1:28:73:69:27:ca:1e:36:e3:8f:5f:95:73: 1a:ec:2b:f8:dd:5e:33:36:48:30:c9:5a:ee:54:e2: 71:cb:77:fd:90:42:11:9b:9e:d7:14:06:36:97:cc: 24:29:b2:27:27:d4:c0:d5:e4:91:ce:bd:19:f8:39: 0d:b7:6b:f2:ce:8a:c6:7d:bb:54:e9:80:58:bd:8c: e0:63:8b:bd:a1:2d:ab:f1:eb:57:92:e0:7c:90:5e: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8A:FF:CD:54:F6:91:F0:0C:00:9C:30:50:EB:AE:93:2B:5D:C5:E9 X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9f:55:75:9b:ff:81:9f:4c:25:db:75:81:b5:28:10:d0:d7: 0c:9c:70:dd:f4:fd:3e:06:46:e1:41:ba:4a:4c:ab:dd:58:ba: 2b:c2:98:de:04:c8:88:6d:ec:54:55:5c:79:c8:46:26:6f:8e: 83:70:46:42:83:ff:de:3e:02:25:b8:3b:62:e3:b8:70:2b:79: bb:b5:66:f0:a4:52:a7:b3:f4:f7:8c:d4:f8:f1:8e:0d:83:d8: 8f:ab:29:66:06:0f:f0:76:c7:cf:b6:95:f6:a8:04:20:8d:30: 36:79:9f:b1:95:1f:62:a8:95:16:22:33:2d:e0:96:fc:3f:4a: f5:8f:d2:24:14:f7:04:02:c6:b0:a6:0b:09:40:e1:fa:44:58: 68:7a:6a:e0:68:7f:8a:17:0f:da:fd:fe:41:19:a5:f1:db:83: 29:b4:72:7c:39:ed:a9:2c:35:0e:80:e0:21:62:88:ae:cf:a8: 8f:e9:cc:b5:11:d2:b7:cf:2f:5a:a3:22:63:32:18:2a:2b:29: d3:b5:04:34:c5:2f:10:59:67:42:c7:f0:ee:30:2f:93:74:83: dd:26:16:77:57:a9:1e:d1:3b:c9:63:03:7e:6f:51:58:b2:0b: 5c:18:d9:bf:0a:e4:ee:c6:cb:3e:3a:23:57:1d:dc:fa:a0:cb: 73:b3:12:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIhD9xkw8wOmPIAZDVuK43+zsyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNTEyMjQwNTI2MTdaFw0yNTEyMjcxNjI4MTdaMDMxMTAvBgNV BAMTKDAxOEFGRkNENTRGNjkxRjAwQzAwOUMzMDUwRUJBRTkzMkI1REM1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSsE+SLRvtq6tiCBe26udLp/RW Nd4dwaQij0vOcO4+GGmUcnyOb5iby9YebRHQC/TSikYfPiSJB0bSVjJgReJ1SYJW VvcM0ezI0QQMW5cP2FC2290H421K5+R7QBdXnMrEdOWOj4OJznaUaYbdRJ8hdk0G v8JA89ebt7p4xZBu4iyArGSWBLym7XMjL90ddtcGmI8FQ+9FC3Vu0c9h5hCp37Ht vg220ShzaSfKHjbjj1+VcxrsK/jdXjM2SDDJWu5U4nHLd/2QQhGbntcUBjaXzCQp sicn1MDV5JHOvRn4OQ23a/LOisZ9u1TpgFi9jOBji72hLavx61eS4HyQXs3RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAYr/zVT2kfAMAJwwUOuukytdxekwHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6fVXWb/4GfTCXbdYG1KBDQ1wyccN30/T4G RuFBukpMq91YuivCmN4EyIht7FRVXHnIRiZvjoNwRkKD/94+AiW4O2LjuHArebu1 ZvCkUqez9PeM1Pjxjg2D2I+rKWYGD/B2x8+2lfaoBCCNMDZ5n7GVH2KolRYiMy3g lvw/SvWP0iQU9wQCxrCmCwlA4fpEWGh6auBof4oXD9r9/kEZpfHbgym0cnw57aks NQ6A4CFiiK7PqI/pzLUR0rfPL1qjImMyGCorKdO1BDTFLxBZZ0LH8O4wL5N0g90m FndXqR7RO8ljA35vUViyC1wY2b8K5O7Gyz46I1cd3Pqgy3OzEgQ= -----END CERTIFICATE-----Generated at Thu Dec 25 19:45:01 2025 by rpki-client